Amendments to the Claims 
Claims 10-18, 24-28, and 33-36 were pending at the time of the Office Action. 
Claims 10, 11, 15-18, 24, 33, and 36 are amended, claims 12 and 34 are canceled. 
Claims 37-40 are newly added. 

Claims 10-11, 13-18, 24-28, 33 and 35-40 are pending. 

1. (Withdrawn) A method comprising: 

determining a version of program code satisfying an operating policy; and 
denying a client access to a resource if a version of the program code on the 

client attempting to access the resource is different from the version of program 

code satisfying the operating policy. 

2. (Withdrawn) The method of claim 1, further comprising granting 
the client access to the resource when the version of program code on the client 
corresponds to the version of program code satisfying the operating policy. 

3. (Withdrawn) The method of claim 1, further comprising 
determining the version of program code on the client in response to requesting 
access to the resource on a network. 
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4. (Withdrawn) The method of claim 1, further comprising 
determining the version of program code on the client during launch of the 
program code. 

5. (Withdrawn) The method of claim 1, further comprising writing the 
version of program code on the client to a cache and then reading the cache while 
the program code is loading. 

6. (Withdrawn) The method of claim 1, further comprising updating 
the program code on the client when the version of the program code on the client 
is different from the version of program code satisfying the operating policy. 

7. (Withdrawn) The method of claim 1, further comprising notifying a 
user at the client if the version of program code on the client is different from the 
version of program code satisfying the operating policy. 

8. (Withdrawn) The method of claim 1, further comprising notifying a 
network administrator if the version of program code on the client is different 
from the version of program code satisfying the operating policy. 
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9. (Withdrawn) The method of claim 1, further comprising recording 
in a log if the version of program code on the client is different from the version of 
program code satisfying the operating policy. 

10. (Currently amended) A method comprising: 

determining a current v ersion of program code satisfying an operating 
policy; and 

determining a client version of program code on the client during launch of 
the program code; 

denying execution t he launch of the program code on a client if-a -when the 
client v ersion of the program code on the client is different from the current 
version of the program code satisfying the operating policy ; and 

updating the program code on the client with updated program code having 
the current version when the client version of program code on the client is 
different from the current version of program code satisfying the operating policy . 

11. (Currently amended) The method of claim 10, further comprising 
executing the program code on the client when the client v ersion of program code 
on the client corresponds to the current v ersion of program code satisfying the 
operating policy. 

12. (Canceled) 
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13. (Original) The method of claim 10, further comprising receiving the 
operating policy at the client. 

14. (Original) The method of claim 10, further comprising writing the 
version of program code on the client to a cache and then reading the cache while 
the program code is loading. 

15. (Currently amended) The method of claim 10, further comprising 
wherein u pdating the program code on the client includes transmitting at least one 
of a patch or a service pack to the client for installation, w hen the version of 
program code on the client is different from the version of program code satisfying 
the operating policy. 

16. (Currently amended) The method of claim 10, further comprising 
notifying a user at the client if -when t he client v ersion of program code on the 
client is different from the current v ersion of program code satisfying the 
operating policy. 

17. (Currently amended) The method of claim 10, further comprising 
notifying a network administrator if -when t he client v ersion of program code on 
the client is different from the current v ersion of program code satisfying the 
operating policy. 
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18. (Currently amended) The method of claim 10, further comprising 
recording in a log if -when t he client v ersion of program code on the client is 
different from the current v ersion of program code satisfying the operating policy. 

19. (Withdrawn) A system comprising: 
an operating policy; and 

a compliance module accessing the operating policy and denying a client 
access to a resource if a version of program code on the client attempting to access 
the resource is different from a version of program code satisfying the operating 
policy. 

20. (Withdrawn) The system of claim 19, wherein the resource is 
available via a host on a network. 

21. (Withdrawn) The system of claim 19, further comprising a 
notification module, said notification module notifying at least one of a user, an 
administrator, and a log when the version of program code on the client is 
different from a version of program code satisfying the operating policy. 

22. (Withdrawn) The system of claim 19, wherein the operating policy 
includes at least one access control list (ACL). 
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23. (Withdrawn) The system of claim 19, wherein the operating policy 
includes at least one access control entry (ACE). 



24. (Currently amended) A system comprising: 
an operating policy; and 

a compliance module accessing the operating policy and denying write 
privileges during an execution of program code on a client ffiwhgn a version of the 
program code on the client is different from the version of program code satisfying 
the operating polic y during a launch of the program code . 

25. (Original) The system of claim 24, further comprising a security 
module authenticating the client in a network, the authenticated client receiving 
the operating policy. 

26. (Original) The system of claim 24, further comprising a notification 
module, said notification module notifying at least one of a user, an administrator, 
and a log when the version of program code on the client is different from a 
version of program code satisfying the operating policy. 

27. (Original) The system of claim 24, wherein the operating policy 
includes at least one access control list (ACL). 
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28. (Original) The system of claim 24, wherein the operating policy 
includes at least one access control entry (ACE). 

29. (Withdrawn) A computer program product encoding a computer 
program for executing on a computer system a computer process, the computer 
process comprising: 

determining a version of program code satisfying an operating policy; and 
denying a client access to a resource if a version of the program code on the 

client attempting to access the resource is different from the version of program 

code satisfying the operating policy. 

30. (Withdrawn) The computer program product of claim 29 wherein 
the computer process further comprises determining the version of program code 
on the client in response to requesting access to the resource on a network. 

31. (Withdrawn) The computer program product of claim 29 wherein 
the computer process further comprises determining the version of program code 
on the client while the program code is loading. 



Iee@hayes , 



8 



Application No. 10/698,598 



32. (Withdrawn) The computer program product of claim 29 wherein 
the computer process further comprises updating the program code on the client 
when the version of the program code on the client is different from the version of 
program code satisfying the operating policy. 

33. (Currently amended) A computer program product encoding a 
computer program for executing on a computer system a computer process, the 
computer process comprising: 

determining a current v ersion of program code satisfying an operating 
policy; and 

determining a client version of program code on the client during launch of 
the program code; 

denying execution t he launch of the program code on a client if a -the client 
version of the program code on the client is different from the current v ersion of 
the program code satisfying the operating polic y; and 

updating the program code on the client when the client version of program 
code on the client is different from the current version of program code satisfying 
the operating policy, the updated program code having a version of the program 
code satisfying the operating policy . 

34. (Canceled) 
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35. (Original) The computer program product of claim 33 wherein the 
computer process further comprises receiving the operating policy at the client. 

36. (Currently amended) The computer program product of claim 33 
wherein the computer process furth e r comprises updating the program code on the 
client includes transmitting a patch to the client for installation on the client, the 
patch including a notification of the patch being at least one of information about 
the patch and an acceptance option for installing the patch, w hen the version of 
program code on the client is different from the version of program code satisfying 
the operating policy. 

37. (New) The method of claim 15, further comprising transmitting a 
notification to the client prior to the installation of the at least one of a patch or a 
service pack on the client. 

38. (New) The method of claim 37, wherein the notification includes an 
acceptance option to initiate installation of the at least one of a patch or a service 
pack on the client. 

39. (New) The system of claim 28, wherein the at least one ACE 
includes access rights to grant read rights to the client. 
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40. (New) A method of updating program code, comprising: 
determining a current version of program code satisfying an operating 

policy; 

receiving an existing version identifier of a program from a client when the 
client launches the program; 

comparing the existing version identifier to the current version; and 
when the existing version identifier is different from the current version, 
updating the program code on the client by: 

transmitting an instruction to the client to deny execution of 
the program code associated with the current version identifier; 

transmitting at least one of a patch or a service pack to the 
client for installation on the client to update the program code to the 
current version; and 

allowing execution of the updated program code on the client 
computer after the at least one of the patch or the service pack is 
installed on the client. 
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